H3C Technologies H3C Intelligent Management Center - Manual (Page 344)

334
Adding a probe traffic analysis task
Adding a probe traffic analysis task makes the probes available as a data source configuration option
for a traffic log audit. For more information on adding a probe task to NTA, see " Managing probe traffic
analysis tasks ," specifically " Adding a probe traffic analysis task ."
Adding a VPN traffic analysis task
Adding a VPN traffic analysis task makes the VPN(s) available as a data source configuration option for
a traffic log audit. For more information on adding a VPN task to NTA, see " Managing VPN traffic
analysis tasks ," specifically " Adding a VPN traffic analysis task ."
After completing these configuration steps, you can perform a traffic log audit. For information on how
to perform an audit, see " Performing a traffic log audit ."
Performing a traffic log audit
A traffic log audit enables you to view source, destination, and session traffic statistics for the last hour for
the selected interface, probe, or VPN. The following information explains how to configure NTA to
perform a traffic log audit. The first step is to capture the NTA server flux log.
To initiate a traffic log audit:
1. Select Service > Traffic Analysis and Audit > Settings from the top navigation bar.
2. Click the Server Management link in the Settings area of the Traffic Analysis and Audit page.
NTA displays all servers in the Server List in the main pane of the Server Management page.
3. Click the Capture Flux Log icon for the NTA server for which you want to capture a flux log.
4. When prompted, click OK to capture the flux log.
The results of the Capture Flux Log request are displayed at the top of the Server Management
page. Review the results to ensure that NTA is configured properly to capture the flux log. It may
take several minutes before the captured data becomes available for viewing.
5. To configure and view the captured data, click the Traffic Log Audit link in the left navigation
tree under Traffic Analysis and Audit.
The Audit Conditions page is displayed.
6. To select the device interface, probe, or VPN for which you want to view statistics, click the Select
button next to the Audit Items field.
The Select Audit Item dialog box is displayed.
All devices that have been added to NTA, selected on the NTA server configuration page, and
added to traffic analysis tasks are displayed. All interface, probe, and VPN traffic analysis tasks
are also displayed.
a. Click the Expand icon next to a device name to view all interfaces for that device.
b. Click the Expand icon next to a task group heading to view all tasks for the task type.
c. Select an interface on the device, or a specific interface/probe/VPN traffic analysis task.
d. Click OK.
If the interface, probe, or VPN for which you want to perform a traffic log audit is not displayed,
it is likely because the device or probe has not been added to NTA, selected as a data source
device for the NTA server you are using, or has not been selected as a data source for an interface,